Troubleshooting the Linux Agent

If the agent is not appeared under the "Endpoints & Network Devices" -> "Endpoint Management" -> "Asset Management", please follow these steps to finding the root cause:

• Check the connection between server and CyberCyte portal, the server must communicate CyberCyte via 443 port.

• Check the agent logs under the "/opt/CyberCyteAgent/logs/<date>_linux_agent.txt". Also, please send the log file to "[e-mail]".

• Check the agent service on the server. If it is not working, please try to uninstall and re-install again.

Checking The Agent Status

• Using Shell:

  • Execute this command in the shell:

    • systemctl status cybercyte_linux_agent.service

• Using CyberCyte Portal:

  • Go to the "Endpoints & Network Devices" -> "Endpoint Management" -> "Asset Management" on the portal. All of the agents will be listed under this page.

Uninstalling/Disabling the Agent

• Using Shell:

  • Execute these commands in the shell:

    • /opt/CyberCyteAgent/CyberCyteAgent —uninstall

    • This command will uninstall osquery too.

    Or

    • service=cybercyte_linux_agent.service; systemctl stop $service && systemctl disable $service && rm /etc/systemd/system/$service && systemctl daemon-reload && systemctl reset-failed && rm -rf /opt/CyberCyteAgent

• Uninstalling the service only:

  • /opt/CyberCyteAgent/CyberCyteAgent —uninstall-service

  • This command will uninstall osquery too.

• Disabling the Agent:

  • Go to the "Asset Management" -> "Endpoint Management" on the portal. Right-click on the machine and disable the agent. This action only disables agent data collection, the agent will update itself but not collect any data.